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COUNTER WITH NON-UNIFORM DIGIT BASE 

FIELD OF THE INVENTION 

The present invention relates generally to electronic counters, and more 
5 specifically to a non- volatile counter with a non-uniform digit base. 

BACKGROUND OF THE INVENTION 

Non-volatile counters are used in various electronic applications. One 
important application for non-volatile counters is in the field of electronic 

10 commerce where it is important to order financial transactions in a definite 
sequence. In such applications it is important that the counting function be 
robust enough to withstand hardware and/or software failures^ including 
unexpected power loss. It is also important for the counting function to be 
secure against unauthorized access and tampering. 

15 One technique for providing a counting function that can withstand 

power loss is to use a battery or similar power supply in conjunction with a \ 
binary counter circuit. Unfortunately, battery-backed counters tend to occupy a 
relatively large amount of circuit or device space and impose high battery costs. 
Also, batteries are prone to failure and discharge and so must be monitored and 

20 periodically replaced to prevent loss of the count data. Further, many binary 
counters do not allow for easy recovery of count data in the event of count 
interruption due to power loss. 




; ) 
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SUMMARY OF THE INVENTION 

A counter is disclosed. The counter includes a nonvolatile storage 
organized in digits having non-uniform bases and circuitry to increment a count 
value represented by the digits in response to an increment command. 

Other features and advantages of the present invention will be apparent 
from the accompanying drawings arid from the detailed description that follows. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is illustrated by way of example and not limitation 
in the figures of the accompanying drawings, in which like references indicate 
similar elements, and in which: 
5 Figure 1 is a block diagram of a computer system in which a counter 

according to embodiments of the present invention may be used ; 

Fig. 2 illustrates an exemplary digit counter that includes N base 10 digits; 

Fig. 3 illustrates a nonvolatile memory device in which a digit counter 
having non-uniform digit bases has been implemented according to one 
10 embodiment; 

Figure 4 illustrates further details of the nonvolatile memory device of Fig. 
3 according to one embodiment; 

Fig. 5 depicts an exemplary list of commands supported by the command 
nonvolatile memory device of Fig. 4; and 
15 Fig. 6 is a flow diagram of an increment operation performed by a 

command state machine in a nonvolatile memory device according to one 
embodiment. 
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DETAILED DESCRIPTION 

A counter with a non-uniform digit base is described in various 
embodiments. In one embodiment, the counter is implemented in a nonvolatile 
memory device so that the count value is maintained during power loss. The 
5 base of each digit in the counter is selected in according to application 
requirements and characteristics of the nonvolatile memory device. 

Figure 1 is a block diagram of a computer system 100 in which a counter 
according to embodiments described herein may be used. The computer system 
100 includes a processor 102 coupled through a bus 101 to a memory 104 and a 
10 mass storage device 106. Memory 104 may be random access memory ("RAM"), 
read-only memory ("ROM"), or other non-volatile memory, such as flash 
memory. Ma?s storage device 106 may be a large capacity persistent storage 
device, such as a hard disk drive, tape drive, or CD-ROM drive. An 
input/output controller 108 is coupled to bus 101 for receiving commands or 
15 data entered through a keyboard, mouse, or similar input device. A display 

device controller 112 is also coupled to bus 101 for providing output through an 
appropriately coupled display device 114. 

Computer system 100 also includes a security co-processor 110. Security 
co-processor 110 is an embedded controller that includes digital circuits to 
20 execute security programs and perform mathematical transforms for security. 
Security co-processor 110 includes several circuits that perform security 
functions, such as authentication circuits and random number generators. 
Security co-processor 110 also includes counter 116, implemented according to 
embodiments described herein, to enable authentication and unique 
25 identification of the transactions that occur within the system. The ability to 
authenticate and uniquely identify transactions provides a level of security in 
protecting the transactions from tampering by unauthorized parties. The 
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monotonic counter 116 may be used in other computer architectures and devices 
without departing from the spirit and scope of the present invention. 

In one embodiment, the counter 116 is a monotonic counter implemented 
in a flash EPROM (erasable programmable read-only memory). A monotonic 
5 counter is a counter that counts in one direction only, up or down. The flash 
EPROM used to implement the monotonic counter may be integrated with the 
circuitry for the security co-processor 110 (i.e., on the same chip), or 
implemented in a separate device. Flash EPROM devices typically use a single- 
transistor memory cells to store data. The state of a given cell is changed by 

10 program (l->0) and erase (0-»l) operations which may be initiated by processor \ 
102 or by security co-processor 110. 

Counters in electronic circuits typically count in binary, with each bit 
; representing a base two digit in the count value. One characteristic of such 
binary counters is that each bit in the count changes state twice as frequently as 

15 the next more significant bit, with the least significant bit in the count changing 
state with each count increment. In the context of a non-volatile memory, this 
toggling of the least significant bit significantly limits the count rate that tan be 
achieved because a relatively slow erase cycle is required every other count. For 
example, for a typical flash memory cell, the program cycle time may be on the 

20 order of 10 microseconds, whereas the erase cycle time may be on the order of 
one second. In this case, the average count rate for the binary counter is limited 
to approximately one half second per count increment (i.e., (1E-5 sec + 1 sec)/2). 
Such a slow average count rate is inadequate for many types of counting 
applications. 

25 Another problem that results when a binary counter is implemented in a 

non-volatile memory is that the frequent programming and erasing of low-order 
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bits may quickly exceed the maximum number of program/erase cycles that can 
be performed on the memory cell before the cell becomes unusable. 
For example, in a flash memory device, the continuous programming and 
erasure of the cells leads to sitress and eventual breakdown of the oxide layer in 
5 the memory cells. Advanced processing techniques have produced flash 

EPROM devices that permit on the order of 100,000 program/erase cycles before 
cells begin breaking down. Thus, the maximum number of program /erase 
cycles supported by a particular memory device may limit the maximum count 
of a binary counter implemented in the device and therefore may render the 

10 binary counter unsuitable for certain applications. 

In one embodiment, the above described maximum count and count rate 
problems are addressed by a "digit counter" implemented in a non-volatile . 
memory device. The count value of a digit counter is indicated by a plurality of 
digits, with each digit having a number of bits equal to the base of the digit 

15 minus 1. For example, the ten symbols of a base 10 digit may be represented by 



nine bits as follows: 



Symbol 


Digit 


0 


111111111 


1 


1111111 10 


2 


11 1 11 1 100 


3 


11111 1000 


4 


1 1 1 1 10000 


5 


1 1 1 100000 


6 


1 1 1000000 


7 


1 10000000 


8 


100000000 


9 


000000000 



A significant benefit of this arrangement is that each of the N symbols of a base N 
digit may be represented by incrementally changing only one bit of the N-l bits 
of the digit. In the context of a non-volatile memory device, this means that only 
20 one erase cycle need be performed every N counts (i.e.> to wrap around from all 
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zeros to all ones). This is in contrast to a typical binary counter in which an erase 
cycle must be performed every other cycle. Because there are fewer time 
consuming erase cycles, a higher average count rate and a higher count limit can 
be achieved. 

5 Fig. 2 illustrates an exemplary digit counter 22 that includes N base 10 

digits. Because an erase cycle (i.e., restoring bits from 0 to 1) is required only 
every 10 th count, as opposed to every second count in a standard binary counter, 
the average count rate achievable in the digit counter 22 is approximately five 
times that of a standard binary counter. Similarly, because a program/ erase 

10 cycle occurs only once every 10 th count, as opposed to once every other count in a 
standard binary counter, the maximum count limit of the digit counter 22 is 
approximately five times that of a standard binary counter. 

Generalizing from the digit counter 22 illustrated in Fig. 2, an erase cycle 
is required as frequently as the least significant digit of the count must be rolled 

15 over. Roll over of the least significant digit, on the other hand, is a function of 
the base of the digit. Combining these two concepts yields that the erase cycle 
frequency in a digit counter is inversely related to the base of the least significant 
digit ~ by increasing the base, M, of the least significant digit, the erase cycle 
frequency is reduced. This result is exploited to advantage in a preferred 

20 embodiment of a digit counter by having a least significant digit with a relatively 
large base and higher order digits with relatively small bases. The bases of the 
higher order digits do not influence the erase cycle frequency in the same way as 
the least significant digit and thus can be made smaller to save storage (recall 

that the number of bits required to represent the digit is determined by the.base 

. ■ ■ ■ <j ■ 

25 of the digit). In an alternate embodiment, however, the bases of the higher order 
digits may also be made large. 
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Fig. 3 illustrates a nonvolatile memory device 25 in which a digit counter 
27 having non-uniform digit bases has been implemented according to one 
embodiment. The least significant digit, DIGIT1, has a relatively large base (base 
= 65536), while the more significant digits, DIGIT2 and DIGIT3, have somewhat 
5 smaller bases (base = 1024). Because of the large base of the least significant 
digit, the maximum average count rate of the digit counter 27 is significantly 
faster than a binary counter that requires an erasure cycle every other count (i.e., 
approximately 65536/2 times as fast) and the number of program/ erase cycles 
required to reach a given count is similarly reduced. The maximum count value 

10 that can be reached by the digit counter is the product of the bases of its three 
digits (65536*1024*1024=6.87 * 10 10 ), which is adequate for a broad range of 
counting applications. Of course, because of its larger base, DIGITl consumes 
more memory (8 kilobytes) than DIGIT2 and DIGIT3 (128 bytes each), but such 
storage requirements can be accommodated by many commercially available 

15 nonvolatile memory devices (e.g., flash EPROM and other forms of 

programmable non-volatile memory). Also, to ensure monotonic operation of 
the digit counter, storage for the most significant digit, DIGITS, may be 
implemented in memory cells that cannot be erased (e.g., one-time program 
(OTP) memory) to prevent the digit counter from wrapping around. Additional 

20 circuitry may also be provided to'prevent wrap around of lower order digits 
after the maximum count has been reached. Alternatively, wrap prevention of 
lower order digits after reaching the maximum count may be implemented in 
system software. For example, kernel level software may be executed to 
command the incrementing of the non-volatile digit counter so that, upon 

25 detecting that the maximum count has been reached, increment commands are 
no longer issued. Note that there may be more or fewer digits in a digit counter 
according to an alternate embodiment. Also, the values of the digit bases shown 
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in Fig. 3 are examples only. Digits having larger or smaller bases may be used in 
alternate embodiments. 

In one embodiment, the base of the least significant digit is selected 
according to a maximum count and a minimum average count rate specified for 
5 a given application. In essence, the base of the least significant digit is made 
large enough to meet the minimum average count rate and also to ensure that 
the number of program/ erase cycles'required to reach the maximum count will 
not exceed the maximum number of program/erase cycles specified for the non- 
volatile memory device in which the digit counter is to be implemented. More 

10 specifically, assume that a given average count rate, R counts/ sec, is required in 
a counter application. Then, the minimum digit base for achieving the average 
count rate may be determined by the following equation: 

Min Digitl Base = (Erase Time - Program Time)/((1/R - Program Time) 
For example, assume that a minimum average count rate of 1000 counts per 

15 second is required, that the erase time of the nonvolatile memory device is 1 
second and that the program time is 10 microseconds. Then the minimum base 
of the least significant digit that could support the count rate is (1 - lE-5)/(lE-3 - 
1E-5) = 1010.1, which rounds up to 1011. 

The relation of the maximum count to the number of program/erase 

20 , cycles of the implementing nonvolatile memory device may also dictate the 

minimum base of the least significant digit. As discussed above, the maximum 
number of counts that be provided by a digit counter is equal to the product of 
the bases of the counter's digits (or, more precisely, the product less 1). Because 
the least significant digit will be erased once for each increment (including 

25 rollover) of the next to least significant digit, the number of erase cycles required 
to reach the counter's maximum count is equal to the maximum count of the 
digit counter divided by the base of the least significant digit (i.e., product of 
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bases of all digits except the least significant digit). For example, suppose that 
the 1000 count-per-second counter application requires a maximum count of 20 
billion (2E10), and that the nonvolatile device in which the counter is to be 
implemented permits a maximum of 100,000 erase cycles. In this case, the next to 
5 least significant digit can be incremented (including rollover) no more than 
100,000 times in order to reach the maximum count of 20 billion. Otherwise the 
maximum erase cycle specification of the nonvolatile memory device will be 
exceeded. Accordingly, the base of the counter must be at least 20 
billion/100,000 = 200,000, or approximately 25 kilobytes in size. Thus, in this 

10 case, the maximum count required by the application and erase cycle limitations 
in the implementing nonvolatile device determine the base of the least significant 
digit, not the count rate. To complete the example, five base 10 digits may be 
used to implement the most significant digits of the counter. 

To summarize, the digit counter may be implemented with various base 

15 sizes in order to accommodate the minimum count rate arid maximum count 
required by different applications and to accommodate the various maximum 
erase cycle specifications and size constraints of different nonvolatile memory 
devices. Thus, the use of non-uniform base sizes permits the digit counter to be 
adapted for use in numerous different applications and in nonvolatile memory 

20 devices having various sizes and erase cycle maximums. 

Figure 4 illustrates further details of the nonvolatile memory device 25 of 
Fig. 3 according to one embodiment. Preferably, the nonvolatile memory device 
25 is a flash EPROM that includes a flash cell array 41 arranged in discrete 
blocks. Other types of nonvolatile storage may be used in alternate 

25 embodiments. 

In one embodiment, the nonvolatile memory device 25 includes a 
command state machine 31 to receive chip enable (CE#), write enable (WE#) and 
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output enable (OE#) signals from a host device such as a microprocessor, 
microcontroller, digital signal processor or application-specific processing unit. 
The command state machine 31 also receives a data input (DATA) either from an 
internal data buffer 33 or from a bi-directional datapath 36 coupled to the host 
5 device. Incoming data is buffered by the data buffer 33 before being written 

an addressable set of storage cells (forming a storage word) in the flash cell array 
41. The most significant bits of an incoming address (ADDR) are decoded by a 
Y-decoder 39 to select a block of storage cells to be written to, while lower order 
bits of the incoming address are decoded by an X-decoder 37 to select a storage 

10 word within the selected block. Gating/sensing circuitry 35 enables access the 

block selected by the Y-decoder output. Once the storage word is selected by the )■ 
X and Y decoders (37, 39), data is transferred to the storage word from the data 
buffer 33. In a read operation, the X and Y decoders (37, 39) are used to select a 
storage word based on an incoming address as described above, then sensing 

15 amplifiers within the gating/sensing circuitry 35 are used to sense the stored 
word and pass the word to the data buffer 33 for eventual output onto the 
datapath 36. The nonvolatile memory device receives a programming voltage 
(Vpp), a supply voltage (Vcc) and a ground reference (GND) from off-chip 
sources. In an alternative embodiment, the programming voltage may be 

20 generated by a charge pump included in the nonvolatile memory device. Also, 
the command state machine 31 outputs a ready signal (RDY/BSY#), an alert 
signal (ALERT) and a maximum count signal (MAX COUNT). The ready signal 
is used to indicate whether the nonvolatile device 25 is available to carry out 
host-requested operations and is typically deasserted, for example, during 

25 program and erase operations. The alert and max count signals are optionally 
provided to indicate illegal counter-related requests and to indicate when the 
digit counter has reached a maximum count. 
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In one embodiment, the command state machine 31 implements a : 
multiple-bus cycle command structure in which the first bus cycle is used to 
receive a command from the host and subsequent bus cycles are used to transfer 
operands, if any, associated with the command. An exemplary, though not 
5 exhaustive, list of commands supported by the command state machine 31 is 
shown in Fig. 5. As shown, a write operation during a first bus cycle indicates a 
new command according to the data associated with the write operation (i.e., FF 
hex indicates a read operation, 90 hex indicates a status read, 50 hex is a 
command to clear the status, 40 hex is a command to program a storage word, 20 

10 hex is a command to erase a block in the array, CO hex is a counter increment 
command, and 60 hex is a command to setup the counter). As shown, the read 
array and program operations involve reading, and writing data from an array 
address during a second bus cycle. Similarly, the read status command involves 
reading a status register during a second bus cycle and the block erase command 

15 involves erasing a block of the flash array . 

An increment command 61 and counter setup command 62 are provided 
/ to support nonvolatile counter operation. In one embodiment, when an 

increment command 61 is received, a counter that is implemented in one or more 
of the blocks of the flash array is incremented and the resulting count is 

20 automatically returned to the host. In one implementation, the count value is 
returned to the host with the value of each digit represented by a binary value 
(e.g., a base^ digit is represented by a 16-bit binary number, a base 1024 digit is 
represented by a 10-bit binary value, and so forth). In an alternate 
implementations, a pure binary value (i.e., no separate representation of digits) is 

25 returned to the host or the raw bit patterns of the digits themselves may be 
returned. In one embodiment, circuitry within the gating/sensing logic 35 is 
used to generate the binary representation of the digits (or of the entire number) 
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returned to the host. In an alternate embodiment, logic within the command 
state machine is used to record the count value and is updated with each 
increment command. When power is cycled, the command state machine reads 
the individual digits of the counter to recover the count at which power down 
5 occurred. The command state machine may record the count value as a binary 
number representation of the entire number or as a binary representation of the 
individual digits. Also, though not shown in Fig. 5, a separate counter read 
command may also be provided to read the counter. In that case, the count value 
need not be automatically returned in response to the increment command. 
10 Instead* the count may be read by the host when desired (e.g., under program 
control). 

In one embodiment, the counter setup command 62 is used to establish the 
size of each digit of the digit counter. For example, the second bus cycle of the 
counter setup operation specifies the number of bits in the first digit, the third 

15 bus cycle specifies the number of bits in the second digit and so forth. In one 
embodiment, the block address of the first block allocated to a given digit is 
specified in each digit, setup bus cycle (i.e., in each of the second through Nth bus 
cycles of the counter setup command 62) so that the block in which different 
digits of the counter are maintained may be specified by the host. This allows 

20 the digits to be scrambled. Also, the digit base may be specified by the value 
transferred on the datapath (i.e., element 36 of Fig. 4) during the digit setup bus 
cycle (i.e., the "DB" value in the DATA column of command 62) so that less than 
all the bits of a given block need be allocated to the digit. For example, a digit 
setup bus cycle in which BA = block 1 and DB = 1024, indicates that the first 1024 

25 bits of block 1 are to be reserved for a digit of the counter. In one 

implementation, if DB exceeds the number of bits of a block (e.g., block size = 
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65536 bits and DB = 100,000), then bits in the subsequent block are automatically 
allocated to the digit. 

In one embodiment, a region of the flash array (e.g., in block N) is used to 
record the digit setup information so that, upon power cycling, the structure of 
5 the digit counter is recovered. The command state machine 31 reads the digit 
setup information on power up and records the boundaries of the digits. Any 
commands other than legitimate counter operations (e.g., increment command 
and, if implemented, read count command) are screened to ensure that they do 
not affect the digits of the digit counter. For example, the command state 

• - v! 

10 machine 31 may compare incoming addresses associated with read, program, 
erase and other non-counter operations to determine whether the addresses fall 
within an address range (or ranges) allocated to the digit counter. If so, the 
operation is disallowed and, optionally, a security alert signal (e.g., the ALERT 
signal discussed above) is generated to allow host processes to record the error 

15 and take appropriate action. In one embodiment, the setup information for the 
digits is recorded in a one-time programmable (OTP) space of the flash array, so 
that it cannot be altered after initial configuration. By this arrangement, the 
nonvolatile memory device may be configured to support numerous different 
secure counting applications either at time of fabrication/installation or during 

20 to end-user setup. Circuitry for preventing wrap of the digit counter after the 
maximum count has been reached may also be included in the command state 
machine 31. Also, the command state machine 31 may include circuitry to assert 
the MAX COUNT signal when the maximum count is reached. ; 

Fig. 6 is a flow diagram of an increment operation performed by the 

25 command state machine 31 of Fig. 4 according to on embodiment. Initially, a 

digit pointer (DIGIT) indicative of the digit to be operated upon is initialized to 1 
at block 71. At block 73, a bit pointer (BIT) is also initialized to 1. At decision 
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block 75, the value of the bit indicated by the bit pointer is evaluated to 
determine if it is erased ("1") or programmed ("0"). If erased, then the bit is 
programmed to a "0" at block 76, effectively incrementing the counter. At block 
78, digits marked for erasure are erased. The purpose of this operation is made 
5 clear below. At block 80, the count value of the digit counter is returned. As 
discussed above, the count may be read anew from the nonvolatile storage in 
response to each increment command, or the command state machine may track 
the number of increments to the count value since the last power up cycle. 

If, at block 75, the value of the bit indicated by the bit pointer is "0," then 

10 the next bit of the digit counter will be checked. Thus, at decision block 81, the 
bit pointer is compared against the base of the digit indicated by the digit 
pointer. If the bit pointer is less than the base minus 1, then the bit pointer can be 
incremented at block 83 without indexing past the end of the digit. If the bit 
pointer is not less than the base minus 1, then all the bits of the digit have been 

15 evaluated (and found to be zero) and the digit pointer (DIGIT) is to be 

incremented. Accordingly, at decision block 87, the digit pointer is compared 
with the number of digits in the digit counter (NUM DIGITS). If the digit pointer 
is less than NUM DIGITS minus 1, then the digit pointer can be incremented 
without indexing past the number of digits in the digit counter. Thus, at block 

20 89, the bits of the digit indicated by the digit pointer are marked for erasure 

erased and the digit pointer is incremented to indicate the next digit of the digit 
counter. By marking the digit for erasure, rollover of the digit is eventually 

accomplished in block 78 after a higher order digit is incremented in block 76. 

j •• . 

After block 89, processing begins again at block 73, to reinitialize the bit pointer 
25 for the newly selected digit to 1. 

If, at decision block 87, the value of the digit pointer is not less than NUM 
DIGITS minus 1, then the maximum count has been reached and no further 
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incrementing of the counter is permitted. If the nonvolatile memory device 
includes a maximum count output, a maximum count signal is asserted at block 
. 89/ Note, that the RDY/BSY or alert outputs may alternatively be used to 
transmit the maximum count signal. 
5 If the maximum count of the counter has not been reached, then 

eventually an erased bit will be detected in one of the digits of the digit counter 
(i;e v at block 75). After the bit is programmed at block 76, all digits marked for 
erasure are erased simultaneously (or at least near in time) in block 78. By this 
design, all digits to be rolled over in a given count increment are rolled qver at 

10 the same time (or at least nearly so). Consequently, cumulative erase times are 
avoided, and delay between the program and erase operations is reduced, 
Jt making the digit counter less susceptible to corruption arising from power down 
in the middle of an increment operation. 

In one embodiment of the present invention, a processor connected to a 

15 monotonic counter, such as processor 102 or security co-processor 110 in Figure 
1, can be programmed to automatically configure the above-described digit 
counter based on user-provided application requirements and nonvolatile 
memory device specifications. The processor calculates an appropriate number 
of digits and an appropriate base for each digit based on input maximum count 

20 and minimum count rate requirements, and based on timing and erase cycle 
maximum characteristics of the nonvolatile memory device used to implement 
the counter. 

The implementation of the non-uniform base digit counter as a non- 
volatile, monotonic counter ensures that the counter is impervious to power 
25 failures that otherwise might cause a loss of count. The digit counter is 

preferably implemented such that higher order digit incrementing occurs before 
lower order digit erase, and that the operation completes before the count value 
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is returned. If a count increment operation is interrupted (such as due to a 
power failure), the lower order digits may not be fully at a zero state. However, 
any intermediate state can be interpreted as being greater than zero, hence a 
logic one. Thus, the last state of the counter can be effectively recovered. 

5 In the foregoing specification, the invention has been described 

with reference to specific exemplary embodiments thereof. It will, however, be 
evident that various modifications and changes may be made thereto without 
departing from the broader spirit and scope of the invention as set forth in the 
appended claims. The specification and drawings are, accordingly to be 
10 regarded in an illustrative rather than a restrictive sense. 
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